Respecing Project Boundaries

Does Codeplex limit access to projects? There seemes that if I have a accout on the server I have access to add bugs and so on to the project. Does this imply wider access to the project or is there other security in place?

I was just thinking that maybe I should not have access to change project information unless I was part of the project in some fashon. Maybe if there were some other permissions you can assign on the project. Just guessing, but I was wondering if this
is something that was planned or something that was incorrect.